CVE-2025-69752
An issue in the "My Details" user profile functionality of Ideagen Q-Pulse 7.1.0.32 allows an authenticated user to view other users' profile information by modifying the objectKey HTTP parameter in the My Details page URL.
- Score
- CVSS 3.1 4.3 Medium
- Status
- Deferred - cve@mitre.org
- Published
- 2026-02-12
- Last modified
- 2026-07-05
- Weaknesses
- CWE-639
References
- https://github.com/brtsec/public-advisories/tree/main/advisories/CVE-2025-69752
